Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
File:                     A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer (raw, json)
Hash identifier:          g1xVHw3p6i4PpiQyAf4gJaslZSDdKGnVGsLFYFtNqnc=
Subject key identifier:   A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D00E4C53E6837025C961B7EF7682812ECEF43BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 14:50:13 +0000
Certificate not after:    Wed 18 Sep 2024 14:55:13 +0000
Subordinate resources:    AS: 268809
                          IP: 45.173.100.0/22
                          IP: 2804:5af4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:00:e4:c5:3e:68:37:02:5c:96:1b:7e:f7:68:28:12:ec:ef:43:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 14:50:13 2023 GMT
            Not After : Sep 18 14:55:13 2024 GMT
        Subject: CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:01:1b:c8:00:6d:40:94:d8:2a:51:24:1f:
                    b2:48:0c:bb:84:69:11:0c:83:c4:9b:9b:d5:a9:e5:
                    e1:d2:06:2f:a3:71:19:ce:c6:a1:e1:60:21:b3:21:
                    af:a7:29:eb:cd:c3:12:c7:ec:73:bf:d3:1d:4a:12:
                    23:97:bb:d4:4c:76:70:9f:19:86:96:b7:51:bb:67:
                    26:2d:5d:8a:da:83:f3:0d:bf:5d:cd:ae:f8:e6:b9:
                    25:6c:f0:f8:bc:0a:69:c5:c9:82:3c:26:f1:f1:1c:
                    32:74:6a:06:08:aa:d3:6e:16:b0:0e:e3:9f:2f:36:
                    c7:f1:80:34:f2:dc:72:3c:5b:e0:9f:37:41:7f:42:
                    f1:7a:bf:8b:c2:77:6b:76:19:56:60:7c:6d:c3:a7:
                    96:81:4f:b6:7d:29:9b:10:e6:69:5d:f1:2d:59:2c:
                    83:f1:d3:24:8f:34:c3:f5:ad:5f:be:27:08:d9:c8:
                    5d:df:73:b0:c5:ce:5b:22:f4:c2:76:5b:f3:fe:50:
                    64:cc:f3:09:21:cf:e7:c5:0b:42:91:f6:09:f9:cb:
                    a7:8a:c9:db:88:e7:c8:3d:df:43:71:68:85:e5:a4:
                    0a:80:54:0d:17:8d:d6:65:68:c1:e4:45:e7:6d:df:
                    24:5c:bb:01:f7:61:f6:e2:50:bb:90:7b:bf:33:44:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.100.0/22
                IPv6:
                  2804:5af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268809

    Signature Algorithm: sha256WithRSAEncryption
         18:88:86:42:ca:12:50:52:78:05:19:7d:f8:3e:92:e8:11:18:
         a1:dc:9f:22:0a:48:75:dc:aa:49:8e:ac:e1:60:06:9d:3d:0c:
         bd:bb:c1:8d:a9:ac:6a:81:d4:3b:f7:c8:36:de:b1:db:73:53:
         44:03:db:82:e4:9c:69:fc:7b:bb:9e:58:9a:07:e2:4c:1e:e7:
         89:2e:ad:be:f1:ab:36:0f:9e:1b:87:aa:99:a7:a0:7b:d0:2e:
         fa:91:6e:8e:ba:c1:ef:93:f4:4f:e7:a8:0e:de:01:b1:20:6b:
         9b:d0:b7:32:39:11:b2:77:cf:b6:dc:7e:75:85:59:11:d7:89:
         91:40:d5:a7:59:03:b0:0e:c2:02:fc:a9:83:47:67:8e:9c:f8:
         4c:90:12:5a:a6:9c:5c:9e:67:f7:0a:22:7f:51:12:c5:8d:36:
         a4:cd:dc:75:16:02:97:ea:e9:b3:7e:f8:64:92:26:e5:47:0f:
         09:56:dd:99:3a:f1:a8:80:16:9d:fd:9b:49:e9:6a:70:7a:c3:
         94:fd:91:dd:39:e0:8a:e8:2d:3a:12:42:07:87:97:48:ed:8f:
         f1:e8:a7:01:74:bd:1a:78:ef:75:e5:ec:f1:56:0a:f3:48:e2:
         73:d5:43:d5:3a:99:63:87:b9:1a:1a:7a:95:88:aa:b7:fc:71:
         48:3d:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org